760dc5e5b79c36bc1dbe53bc5a891ce002b92ff49d8f47ca94d599615550b428

Sharing

Copy URL Twitter E-mail

General

Target

760dc5e5b79c36bc1dbe53bc5a891ce002b92ff49d8f47ca94d599615550b428
Size

156KB
MD5

46b3fa255e5606535f73792573902780
SHA1

60caf35a68e611eb070cc3ae030f7ddff246461e
SHA256

760dc5e5b79c36bc1dbe53bc5a891ce002b92ff49d8f47ca94d599615550b428
SHA512

c5849c4a79905c4e92f4a76382a4788e343efa173dcb8428e05cda9c61bf80566c4e0b6bb00a78dd70be734b643a8fbb4093715701837ce2077839a4b920458a
SSDEEP

3072:21uKFRt9e3AWKQTt90mOgsxMfGnQ6o/2XUknzeBdnn4r:KuMCABu90mObxMfGQkUsaF

Score

N/A

Malware Config

Signatures

Files

760dc5e5b79c36bc1dbe53bc5a891ce002b92ff49d8f47ca94d599615550b428
.dll windows x86

9bb102afeb519f547a7b0eefb4b6fe05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hcrypt

certGetValidDuration
osNow
pkcDestroy
osCmpTime
certIsIssuedBy
osUnlock
hashCtrl
osLock
pkcCreate
osDestroyLock
osCreateLock
hashUpdate
hashAlgCtrl
randBytes
pkcDecrypt
hashFinal
hashInit
pkcCtrl
hashCreate
hashCopy
certCreate
pkcEncrypt
hashDestroy
certGetPKCContext
certDecode
certDestroy
convCreate
certGetCertDER
convUpdate
convDestroy
convCtrl
convInit

kernel32

InitializeCriticalSection
DeleteCriticalSection
SetEnvironmentVariableA
CompareStringA
CompareStringW
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetFilePointer
SetStdHandle
LoadLibraryA
GetProcAddress
CloseHandle
GetACP
GetCPInfo
GetOEMCP
InterlockedIncrement
InterlockedDecrement
WriteFile
GetEnvironmentStringsW
FlushFileBuffers
WideCharToMultiByte
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitProcess
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
FreeEnvironmentStringsA

Exports

Exports

hsslEnd
hsslInit
sslAddCertificate
sslAddDistinguishedName
sslClose
sslCopy
sslCreate
sslDeleteSessionID
sslDestroy
sslForceHandshake
sslGetNegotiatedCipher
sslGetPeerCertificate
sslGetPeerCertificateChainLength
sslGetProtocolVersion
sslGetReadPendingSize
sslGetWritePendingSize
sslHandshake
sslRead
sslServiceWriteQueue
sslSetCertificateRef
sslSetCheckCertificateFunc
sslSetDHAnonParams
sslSetExportPrivateKey
sslSetIOFunc
sslSetIORef
sslSetOnHandshakeCompleteFunc
sslSetPeerID
sslSetPrepareClientCertFunc
sslSetPrivateKey
sslSetProtocolSide
sslSetProtocolVersion
sslSetRequestClientCert
sslSetSessionFunc
sslSetSessionRef
sslWrite

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9bb102afeb519f547a7b0eefb4b6fe05

Headers

File Characteristics

Imports

hcrypt

kernel32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB